Production credential/key scan:
PASS: no production credential/key pattern found

Forbidden technology scan:
PASS: no WebView or direct OpenAI client endpoint found

Release cleartext controls:
app/src/main/res/xml/network_security_config.xml:3:    <base-config cleartextTrafficPermitted="false">
app/src/main/AndroidManifest.xml:15:        android:usesCleartextTraffic="false">
app/src/main/java/de/drazz/boehmitools/training/data/network/Api.kt:77:        require(BuildConfig.DEBUG || scheme == "https") { "Release-Builds erlauben ausschließlich HTTPS." }
app/src/main/java/de/drazz/boehmitools/training/data/network/Api.kt:77:        require(BuildConfig.DEBUG || scheme == "https") { "Release-Builds erlauben ausschließlich HTTPS." }